Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215274.roa
File: AS215274.roa (raw, json)
Hash identifier: IwDnkU7NiXfSTjySSrmk7UvJpDIMVYHuMd/aCEXzCuA=
Subject key identifier: 11:BE:05:31:4B:9E:D0:61:23:47:40:B2:BD:E2:C4:5A:0D:C7:1C:BE
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 1CF9BAB773D462EC3FF2CFD300D9FC126783B23F
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215274.roa
Signing time: Thu 29 Aug 2024 03:41:14 +0000
ROA not before: Thu 29 Aug 2024 03:36:14 +0000
ROA not after: Thu 28 Aug 2025 03:41:14 +0000
asID: 215274
IP address blocks: 2a0a:6044:a600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:f9:ba:b7:73:d4:62:ec:3f:f2:cf:d3:00:d9:fc:12:67:83:b2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Aug 29 03:36:14 2024 GMT
Not After : Aug 28 03:41:14 2025 GMT
Subject: CN=11BE05314B9ED061234740B2BDE2C45A0DC71CBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:44:8f:9a:ca:aa:68:44:7d:51:77:12:29:
45:24:b7:06:b6:4a:47:60:fc:00:5c:30:b2:ad:7e:
f1:76:fa:25:41:f8:4b:27:53:08:32:8d:22:12:81:
25:1f:04:a3:4c:82:c8:29:97:bf:9a:c9:ad:89:c9:
14:f7:83:e5:e2:e7:fc:e9:9c:4c:9b:a1:1c:04:97:
9f:86:bf:ee:bf:66:69:40:2f:f2:71:34:80:2a:77:
c1:ca:48:f5:6b:e1:77:be:ca:52:2e:07:f6:58:d6:
d8:6f:d0:85:6a:68:f6:c7:ad:98:eb:ee:af:0c:56:
e3:68:d1:a1:57:48:1d:31:30:cc:0e:69:eb:fe:1f:
5a:ec:0d:86:26:ee:dd:66:60:b7:9a:fe:df:ca:79:
19:3d:f8:1b:b4:cb:2c:b9:49:58:06:e8:09:7f:08:
d5:c2:af:d2:01:76:36:72:4a:cb:de:95:f5:e6:d4:
32:14:4c:c4:54:58:6f:30:f0:65:ee:f5:d9:b8:f9:
e4:e2:ed:c1:48:a2:5f:96:95:0e:ff:5d:7b:5a:ef:
90:ac:e4:0b:2a:18:fc:f9:67:45:fd:d6:b5:41:12:
3c:81:ff:1c:e2:e6:2c:84:3a:55:05:5e:22:3f:f5:
fb:7c:de:ec:79:9c:d9:b6:86:e6:64:9c:dc:13:a5:
e9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BE:05:31:4B:9E:D0:61:23:47:40:B2:BD:E2:C4:5A:0D:C7:1C:BE
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215274.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a600::/40
Signature Algorithm: sha256WithRSAEncryption
8a:f9:a1:8f:66:5d:04:6d:e5:fc:4b:b4:51:83:74:dd:61:1a:
4d:7d:71:64:68:68:36:8f:5f:98:3b:49:86:a9:c6:df:a5:eb:
e1:45:73:89:60:f7:c5:8e:e3:34:b5:ba:fc:5e:91:8b:3e:97:
ba:82:00:31:bf:1f:c2:16:20:7b:bf:57:0e:10:4e:eb:cc:b0:
f9:9a:11:88:d9:cb:95:da:c6:0c:a2:17:6e:2b:4d:9a:20:60:
e7:35:79:dc:b2:21:bf:e5:96:10:a1:6e:e3:e6:4a:00:c5:5e:
7b:bc:98:59:cd:29:ee:05:9b:7f:dd:88:36:21:04:2c:ed:15:
34:98:f8:43:d8:50:7a:c5:17:20:3c:f3:06:fe:09:85:38:a0:
30:7e:4c:d1:5f:21:07:02:ca:42:fd:49:f1:7c:3d:e0:da:1b:
31:21:42:40:f1:6d:22:24:0f:71:22:eb:12:c6:bd:5c:a8:ca:
be:ad:21:7a:b8:6b:1c:1e:45:6e:e1:44:c1:0f:c1:b7:0a:de:
b1:9d:d0:3b:2f:0a:6d:b7:10:db:2d:03:14:ae:8c:07:ab:9e:
73:c0:33:b7:d2:88:60:34:4e:de:f8:08:5d:0e:aa:ef:cc:7c:
12:c1:12:dc:bd:cc:58:1d:f8:05:90:0c:cf:66:0d:e0:56:c3:
4d:22:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:49 2025 by rpki-client